home / security

Security

Report vulnerabilities to security@connectordome.com.

Please include enough detail to reproduce. Prefer a private report before public disclosure.

In scope especially:

• SSRF bypasses
• secret leakage
• sandbox escapes
• mutating-operation exposure
• package substitution
• provenance spoofing
• registry integrity defects

There is no bug bounty and no promised response SLA.

v0.1 is observation-only. Generated connectors must not expose actuation.

See also SECURITY.md.